
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier: msGCwhPDN2Uvxh0K5XDnOZvOldB0gpcNjWRGubVTiyY=
Subject key identifier: 7E:E4:E2:A3:C0:60:89:D9:43:38:F0:CD:AB:BC:29:A1:12:C4:BB:3A
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number: 07D6
Signing time: Mon 02 Mar 2026 00:23:23 +0000
Manifest this update: Mon 02 Mar 2026 00:23:21 +0000
Manifest next update: Mon 09 Mar 2026 00:23:21 +0000
Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: 7KPM0SaKSZADgVXYpakuIVAOEvA3BpGjrBbi59e1bas=)
2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: wEVKzo/06lgCcRwDbGVatHG5G3Gc2ADy2oBpbkeEK8Y=)
3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: pYQQWevua0AS/DnR7jQgYAc7go0rrhJf56jb391i7kE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Validity
Not Before: Mar 2 00:23:21 2026 GMT
Not After : Mar 9 00:23:21 2026 GMT
Subject: CN=69a4d87a-8e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:15:f8:7a:30:7b:41:17:8a:d2:04:a6:bf:
57:0d:d9:73:50:d1:bb:9a:f1:e2:87:4e:e8:ad:24:
cf:c6:2e:ca:2f:cb:b6:f9:66:83:b5:91:96:46:dc:
e0:4b:1a:40:54:65:fd:95:2f:2d:0a:be:1a:f9:4e:
cb:37:bb:35:c3:14:4a:4a:dc:cc:dc:0c:b6:d0:9f:
cf:67:02:76:1f:33:1b:86:da:63:e4:b7:8b:b6:0a:
32:2d:07:09:36:12:7d:a0:2e:7f:8f:eb:75:a6:ed:
5d:7b:7d:d6:d2:8b:31:37:ba:51:47:c1:c9:3b:84:
86:c2:e3:59:90:67:d9:c8:85:8e:95:b8:fa:8a:de:
17:cf:76:cb:97:e7:b8:c8:bb:b9:3d:fa:77:e5:5e:
67:9d:28:05:d0:3e:ad:6c:d8:93:b0:66:b2:7b:26:
20:a6:12:61:3b:ce:02:5a:11:83:3a:66:27:62:3d:
e6:5f:98:4e:00:08:42:f5:19:84:82:07:f2:b2:73:
f6:df:12:7e:cb:65:7d:e2:14:21:86:0c:b1:47:1b:
cd:2b:0f:ca:5f:a3:7a:7a:be:bb:3f:9f:f8:0b:3f:
d0:36:b2:a5:1b:cd:26:5d:1b:b9:1e:92:98:bb:64:
4e:d0:06:99:db:c9:74:d4:c8:54:03:d9:6c:fb:c7:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:E2:A3:C0:60:89:D9:43:38:F0:CD:AB:BC:29:A1:12:C4:BB:3A
X509v3 Authority Key Identifier:
keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:e8:36:08:0e:8c:21:d8:c1:3e:1f:6f:c8:eb:98:a2:0e:
4d:3a:7f:87:9b:a2:9d:63:66:94:1e:63:8b:0a:95:09:7e:82:
2e:94:e4:12:84:7a:f9:1c:f3:2d:3b:f4:ee:eb:db:e6:fc:f4:
f4:e0:2d:42:7b:f4:0b:6c:6b:8f:96:6f:63:d7:ef:4d:f0:eb:
90:f9:86:6d:7c:7b:bd:6f:d0:b6:a7:2b:55:37:db:83:d6:1c:
9f:db:b0:0c:43:55:bb:67:80:e7:7a:55:63:e1:a0:bd:24:49:
da:9f:09:bc:09:b0:ca:5c:eb:b4:9a:92:fb:99:d9:84:df:36:
a1:55:60:41:0d:f9:ef:55:d2:02:20:c1:9c:f2:a5:cd:b0:33:
91:89:1b:73:f5:4c:3a:0a:b1:c3:db:d9:b3:df:67:f5:ac:49:
16:27:bb:7b:ca:a6:f9:f7:b1:8f:ee:a4:e4:83:a6:e9:ff:e0:
23:b0:75:56:a9:f8:47:93:16:84:6c:d6:b8:f0:d7:93:7a:19:
b9:8e:8e:63:13:fd:9b:92:a4:7f:5e:6a:d3:ba:0d:4b:6f:e8:
73:70:73:25:02:1f:f6:53:2d:af:41:04:98:ee:2f:90:be:05:
68:ed:c7:e4:bf:86:ed:4b:b0:f5:ad:e9:57:dc:22:0d:e3:0a:
df:cc:ff:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy
QjgzOUZCRUQwHhcNMjYwMzAyMDAyMzIxWhcNMjYwMzA5MDAyMzIxWjAYMRYwFAYD
VQQDEw02OWE0ZDg3YS04ZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkq8V+Howe0EXitIEpr9XDdlzUNG7mvHih07orSTPxi7KL8u2+WaDtZGWRtzg
SxpAVGX9lS8tCr4a+U7LN7s1wxRKStzM3Ay20J/PZwJ2HzMbhtpj5LeLtgoyLQcJ
NhJ9oC5/j+t1pu1de33W0osxN7pRR8HJO4SGwuNZkGfZyIWOlbj6it4Xz3bLl+e4
yLu5Pfp35V5nnSgF0D6tbNiTsGayeyYgphJhO84CWhGDOmYnYj3mX5hOAAhC9RmE
ggfysnP23xJ+y2V94hQhhgyxRxvNKw/KX6N6er67P5/4Cz/QNrKlG80mXRu5HpKY
u2RO0AaZ28l01MhUA9ls+8fxqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7k4qPA
YInZQzjwzau8KaESxLs6MB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5
MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC
cUUzcFRpakhVZ0FyZzUtLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiXPoNggOjCHYwT4fb8jrmKIOTTp/h5uinWNmlB5jiwqVCX6CLpTkEoR6+Rzz
LTv07uvb5vz09OAtQnv0C2xrj5ZvY9fvTfDrkPmGbXx7vW/QtqcrVTfbg9Ycn9uw
DENVu2eA53pVY+GgvSRJ2p8JvAmwylzrtJqS+5nZhN82oVVgQQ3571XSAiDBnPKl
zbAzkYkbc/VMOgqxw9vZs99n9axJFie7e8qm+fexj+6k5IOm6f/gI7B1Vqn4R5MW
hGzWuPDXk3oZuY6OYxP9m5Kkf15q07oNS2/oc3BzJQIf9lMtr0EEmO4vkL4FaO3H
5L+G7Uuw9a3pV9wiDeMK38z/vg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:35 2026 by rpki-client